Generation and management of customer pin's

• US 7,716,491 B2
• Filed: 03/11/2005
• Issued: 05/11/2010
• Est. Priority Date: 11/22/1999
• Status: Active Grant

• Current Assignee: Quadient Technologies France
• Original Assignee: Neopost Technologies S.A. (Quadient SA)
• Inventors: Frey, Lorenz R., Brookner, George M.
• Primary Examiner(s): Kim; Jung
• Assistant Examiner(s): Lemma; Samson B
• Application Number:
  US11/077,659
• Publication Number:
  US 20050166061A1
• Time in Patent Office: 1,887 Days
• Field of Search: 713/184, 713182-183
• US Class Current: 713/184
• CPC Class Codes: G06Q 20/3558 Preliminary personalisation for transfer to user
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1025 Identification of user by a PIN code

Abstract

A method for securely generating a PIN comprises generating a number of random binary bits; determining the least significant bits of the number of bits; converting the least significant bits to a decimal integer; shifting the value of the integer by a predetermined constant to produce a shifted integer; and encoding the shifted integer as bits in a PIN block in accordance with a standard. A method for managing security of a PIN used to provide access to a secure device comprising choosing the PIN; storing an encrypted version of the PIN in the device; and communicating the PIN to a user of the device via a communication channel separate and apart from a channel reset to provide the device to the user. A method for resetting a PIN in a secure device comprising sending a message to a data center having an original PIN for the device, the message including authorization data indicative of at least one of the device and an authorized user of the device, and securely communicating the original PIN to the location of the device.

Claims

1. A method for resetting a PIN in a secure device comprising:

sending a message to a data center having an original PIN for said device, said message including authorization data indicative of the device and an authorized user of said device,

informing the authorized user of a remaining number of reset operations, and

securely communicating the original PIN to the location of the device,

wherein at least one of sending the message to the data center having the original PIN for said device and securely communicating the original PIN to the location of the device are performed using at least one of a secure communication channel and secure communication techniques.

2. The method of claim 1, wherein the device has a current PIN, the method further comprising replacing the current PIN with the original PIN.

3. The method of claim 1, wherein the communicating of the original PIN comprises:

sending the original PIN to the user of the device; and

the user of the device entering the original PIN into the device.

4. A method for resetting a PIN in a secure device comprising:

sending a PIN reset request message to a data center, the data center having an original PIN for said device, said message including authorization data indicative of the device and an authorized user of said device;

informing the authorized user of a remaining number of reset operations,

receiving the original PIN by a secure communication from the data center; and

replacing a current PIN of the device with the original PIN,

wherein at least one of sending the message to the data center having the original PIN for said device and receiving the original PIN from the data center are performed using at least one of a secure communication channel and secure communication techniques.

5. The method of claim 4, further comprising:

receiving a remaining number of available reset operations.

6. A method for resetting a PIN in a secure device comprising:

receiving a PIN reset request at a data center, the data center having an original PIN for said device, said message including authorization data indicative of the device and an authorized user of said device,

informing the authorized user of a remaining number of reset operations, and

securely communicating the original PIN to the location of the device,

wherein at least one of receiving the message at the data center having the original PIN for said device and securely communicating the original PIN to the location of the device are performed using at least one of a secure communication channel and secure communication techniques.

7. The method of claim 6, further comprising sending a PIN reset to replace a current PIN of the device with the original PIN.